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IMAGE PROCESSING APPARATUS 

BACKGROUND OF THE INVENTION 
Field of the Invention 
5 The present invention relates to an image 

processing apparatus for preventing the forgery of 
bills, etc. in a recording system for processing an 
image in a host computer and printing the image on a 

y3 recording device. 

Sj 10 Related Background Art 

jy Many systems for preventing the forgery of bills, 

HI valuable securities, etc. are designed as input /output 

r» device built-in systems such as copying units, etc. 

Us However, with an increasing number of personal 

15 computers, high-performance peripheral devices such as 
a scanner, a digital camera, a printer, etc. have been 
developed. As a result, with these high-performance 
peripheral devices, the personal computers can output 
an image at a quality level higher than an image output 
20 by the input/output device built-in copying units. 

Thus, in a personal computer environment, a forgery 
preventing system is required. 

As a characteristic of a forgery preventing system 
in the personal computer environment, a host computer 
25 controls input and output devices. Therefore, it is 

necessary to allow an image process program of the host 
computer to recognize specified patterns of bills, 
valuable securities, etc. A personal computer can 



output data without a specific image process program 
only if it is informed of the control code of the 
output device . 

Accordingly, a method of encrypting the control 
code of the output device is effective to prevent the 
use of a program other than the specific image process 
program for a forgery preventing process. The above 
mentioned method is disclosed by, for example, by 
Japanese Patent Application Laid-Open No. 6-105141 
although not in the personal computer environment. 
FIG. 2 shows an example when this method is applied to 
the personal computer environment. 

In FIG. 2, the processes in steps S2001 to S2005 
are performed by the host computer, and the processes 
in steps S2006 to S2009 are performed by the recording 
device . 

In the first step S2001, image data is input from 
an OS (basic software) or an application. Then, in 
step S2002, an image process including a forgery 
preventing process is performed. The image process in 
step S2002 includes color matching, gamma correction, 
and quantizing processes to convert an input image into 
print image data. In the forgery preventing process in 
step S2002, determination is normally made on a 
specified image by performing a pattern recognizing 
process. If the input image matches the specified 
image, then an error process is performed on the image 
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Then, the print data on which an image process has 
been performed is encrypted in step S2003. The 
encrypted print data is converted into print control 
data as a command for control of a printer in step 
S2004. 

The print control data as a command is transferred 
to the printer by controlling (control can be 
practically performed by the OS) the data transfer 
circuit ( not shown in the attached drawings ) in step 
S2005. 

Next, in step S2006, the printer receives the 
print control data, A command analyzing process is 
performed on the received print control data in step 
S2007, and encrypted print image data is generated. 

Then, the encrypted print image data is converted 
into print data in a decryption process in step S2008, 
and the decrypted print data is printed on a storage 
medium in step S2009. 

However, since in the above mentioned system which 
performs the encryption process between the host 
computer and the printer, there is an one to one 
correspondence between the input image and the data 
transferred to the printer, the encrypted data can be 
easily decrypted. 

That is, it is the same as the case where the 
control code of the printer used in the conventional 
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system is not open, and there is a -problem that the 
image forgery preventing process cannot be effectively 
performed. 

SUMMARY OF THE INVENTION 

An object of the present invention is to solve the 
above mentioned problems, and provide an improved image 
processing apparatus and method. 

Another object of the present invention is to 
provide an image processing apparatus and method 
capable of effectively performing a forgery preventing 
process on an input image. 

A further object of the present invention is to 
provide an image processing apparatus and method by 
hardening the decryption of a forgery preventing 
process. 

A further object of the present invention is to 
provide an image processing apparatus and method 
capable of effectively preventing a print process 
performed by a number of unspecified image recording 
devices by encrypting print control data for 
controlling an image recording device using a common 
key issued by an image recording device when the image 
recording device is allowed to print an image, and by 
disabling any other image recording devices than the 
image recording device by which the common key has been 
generated to record the image. 
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Further objects of the present -invention will be 
clearly described by the following explanation based on 
the attached drawings and the claims. 

5 BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a flowchart of the procedure of the 
operations of the recording system according to the 
first embodiment of the present invention; 

FIG. 2 is a flowchart of the procedure of the 
10 encryption process according to the recording system of 
the conventional technology; 

FIG. 3 is a flowchart of the procedure of an 
encryption process according to the first embodiment of 
the present invention; 
15 FIG. 4 is a flowchart of the procedure of a 

decryption process according to the first embodiment of 
the present invention; 

FIG. 5 is a flowchart of the procedure of an 
encryption table generating process according to the 
20 first embodiment of the present invention; 

FIG. 6 is a flowchart of the procedure of a 
decryption table generating process according to the 
first embodiment of the present invention; and 

FIG. 7 is a block diagram of an example of the 
25 configuration of the image data recording system 
realizing the present invention. 
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DETAILED DESCRIPTION OF THE PREFERRED- EMBODIMENTS 
( First Embodiment ) 

The embodiments of the present invention are 
described below in detail by referring to the attached 
5 drawings . 

FIG. 1 is a flowchart of the procedure of 
processing data in the recording system according to 
the present invention . 
™ In FIG. 1, the processes in steps S1001 to S1004 

^ 10 and steps S1009 to S1012 are performed by a host 
|3 computer. The processes in steps S1005 to S1008 and 

:C steps S1013 to S1017 are performed by s recording 

m 

is device. 

O 

{=* In the first step S1001, image data is input. 

m 

,£j 15 Then, in step S1002, an image process including a 

^ forgery preventing process is performed. 

Next, in step S1003, a print ID is generated, and 

then the print ID is transferred to a recording device 

in step S1004. 

20 Next, in step S1005, the recording device receives 

a print ID, and stores the received print ID in step 
S1006. 

Next, in step S1007, a common key is generated. 
At this time, the recording device is managed such that 
25 a print ID is paired with a common key. 

If a common key is generated in step S1007, it is 
irregularly generated such that the common key cannot 



be associated" with the value of the print ID. 

Then, in step S1008, the generated common key is 
transmitted to the host computer. 

The common key transmitted from the recording 
device is received by the host computer in step S1009. 
Thus, since the recording device issues the common key 
in response to the transfer of the print ID of the host 
computer, the transfer of the print ID in step S1004 
indicates a request to issue a common key. 

In step S1010, the print image data generated in 
the process performed in step S1002 is encrypted by the 
common key received in step S1009. 

Then, in step S1011, the encrypted print image 
data is converted into a print control command. Then, 
in step S1012, the print ID and the print control data 
command are transferred to the recording device side. 

In step S1013, the recording device receives a 
print ID and print control data. Then, in step S1014, 
the common key corresponding to the received print ID 
is retrieved and obtained from a managed pair of the 
print ID and the common key. Then, in step S1015, the 
command of the print control data is analyzed, and the 
encrypted print image data is extracted. 

Then, in step S1016, the print image data is 
decrypted using the common key obtained in step S1014. 
In step S1017, the print image data is stored on the 
storage medium in the print process. 
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The print data transferring process in steps S1012 
and S1013 and the process in steps S1015 to S1017 can 
be sequentially repeated in parallel. Although not 
shown in FIG. 1, the used print ID and t*ie common key 
5 paired therewith may be discarded after performing the 
print process in step S1017. 

FIG. 3 is a flowchart of the contents of the 
encryption process performed in step S1010. 

O 

-Q The random number table according to this 

N 

y 10 embodiment comprises series of irregularly arranged 

jit integers (1-byte length each) of "0" to "255". That 

is, the table size is 256 bytes. The common key is 
'L formed by integers from 0 to 255. 

|r! First, in step S3001, a random number table is 

i y 

4J 15 stored on the memory (RAM) of the host computer. Then, 

!** in step S3002, the random number table on the memory 

(RAM) is converted into an encryption table using a 

common key . 

In step S3003, the print image data is encrypted 
20 using the generated encryption table. In this case, 
the print image data is sequentially read in a byte 
unit, the data value of one read byte is set as an 
offset from the leading address of the encryption 
table, and the value of the corresponding address is 
25 set as the encryption print image data. 

FIG. 5 is a flowchart of the process performed in 
step S3002. 
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First, in step S5000, the process is started, 
then, in step S5001, a variable n is set to "0". The 
variable n is a management counter for 100 times 
repetition of the processes in steps S5003 to S5005 
5 described later. 

Then, in step S5002, the value of the common key 
is assigned to a variable B. Then, in step S5003, a 
variable A is computed using the variable B by the 
P following Equation (1). 'mod 1 is a well-known function 
'-~4 10 for use in obtaining a residue in a division. 
3 A = (5 x B + 13) mod 256 (1) 

p Next, in step S5004, the variable B is computed 

using the variable A by the following Equation (2). 
2 B = (5 x A + 13) mod 256 ... (2) 

; ^ 15 In the computation by the Equations (1) and (2), 

:~ pseudo random numbers are generated in a linear 

congruential method. That is, the common key is used 
for the initial value in the linear congruential 
method . 

20 Then, in step S5005, the table value whose offset 

from the leading address of the random number table 
stored in the memory in step S3001 is A and the table 
value whose offset is B are interchanged. Then, in 
step S5006, n is incremented by 1. 

25 It is determined in step S5007 whether or not n is 

"100". If it is "100", then control is passed to step 
S5008, and the converting operation terminates. If it 
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is determined in step S5007 that n is not 100, control 
is passed to step S5003. 

FIG. 4 is a flowchart explaining the procedure of 
the decryption process performed in step S1016. The 
random number table used in this embodiment is the same 
table as that used in the process in step S3001. 

First, in step S4001, the random number table is 
developed on the memory (RAM) of the recording device. 

Then, in step S4002, the random number table on 
the memory (RAM) is converted into a decryption table 
using a common key. In the obtained decryption table, 
the offset value from the leading address of the series 
and the integer stored at the address can be obtained 
by interchanging the values on the above mentioned 
encryption table. 

For example, when the 25th value from the start of 
the encryption table is "12", the 12th value from the 
start of the decryption table is "25" (assume that the 
start of the table is set to 0). 

That is, the encryption table is an inverse 
conversion table of the decryption table. Assuming 
that a function A( ) indicates the conversion using the 
encryption table and a function B( ) indicates the 
conversion using the decryption table, the following 
Equations exist. 

a = A (d), d = B (a) 

Then, the encryption print image data is decrypted 



using the generated decryption table in step S4003 . In 
step S4003, the encryption print image data is 
sequentially read in a byte unit. The read 1-byte data 
value is an offset from the leading address of the 
encryption table, and the value of the corresponding 
address is the print image data. 

FIG. 6 is a flowchart of the process in step 
S4002. 

In FIG. 6, the processes in steps S6000 to S6007 
are the same as the converting operation in steps S5000 
to S6007 on the encryption table. After generating the 
encryption table, the address value and the table value 
are interchanged in step S6008 for conversion into the 
decryption table. 

The following Tables 1, 2, and 3 are the tables 
used or generated in this embodiment. 
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The above mentioned Table 1 is an example of the 
random number table according to this embodiment. The 
Table 2 is an encryption table when the common key is 
"15" in this embodiment. The Table 3 is a decryption 
table when the common key is "15" in this embodiment. 

In the above mentioned embodiment, the encryption 
process and the decryption process are performed by the 
conversion system using the tables. This system 
requires a smaller load in performing an operation, 
thereby preventing the printing speed from being 
reduced , 

Furthermore, according to this embodiment, the 
recording device manages both print ID and common key. 
Therefore, when the recording device is connected to a 
plurality of host computers, the print process can be 
performed in the transfer order of print control data 
regardless of the common key issue order. 
( Other Embodiments ) 

In the above mentioned embodiments, an encryption 
table is generated by converting a random number table 
using a common key, but the encryption table can be the 
common key. Furthermore, the common key can be used as 
a parameter in the congruent ial method, and an 
encryption table can be generated by generating pseudo 
random numbers - 

The encryption table may be generated by 
conversion using the common key according to not only 



- 16 - 



the- congruential method but also -an average method. 
Since a common key of a specified value can be issued 
in the above mentioned embodiments, the value of an 
internal timer of the recording device can be used. 

An example of the configuration of the image data 
recording system embodying the present invention is 
described below by referring to the block diagram shown 
in FIG. 7. 

In FIG. 7, reference numeral 70 denotes an image 



\J\ 10 data processing device; reference numeral 71 denotes an 
jrj interface; reference numeral 72 denotes an image 

!J[ processing unit; reference numeral 73 denotes a print 

ID generating unit; reference numeral 74 denotes a 
print ID storage unit; reference numeral 75 denotes a 
15 first transfer unit; reference numeral 76 denotes an 
encryption unit; reference numeral 77 denotes a print 
control data generating unit; and reference numeral 78 
denotes a second transfer unit. 

Furthermore, reference numeral 80 denotes an image 
20 data recording device; reference numeral 81 denotes an 
interface; reference numeral 82 denotes a common key 
generating unit; reference numeral 83 denotes a 
management unit; reference numeral 84 denotes a common 
key issue unit; reference numeral 85 denotes a common 
25 key obtaining unit; reference numeral 86 denotes an 
analyzing unit; reference numeral 87 denotes a 
decryption unit; and reference numeral 88 denotes a 
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print unit. 

As shown in FIG. 7, the image data recording 
system comprises the image data processing device 70 
and the image data recording device 80. Through the 
interface 71 and the interface 81 respectively provided 
in the image data processing device 70 and the image 
data recording device 80, various data and commands are 
transmitted and received to print the image data input 
to the image data processing device 70 on the image 
data recording device 80, and then output. 

In FIG. 7, the image processing unit 72 performs 
the image process including the forgery preventing 
process on the input image data. The print ID 
generating unit 73 generates a print ID corresponding 
to the image data processed by the image processing 
unit 72 in the forgery preventing process. The 
generated print ID is stored in the print ID storage 
unit 74, and transferred by the first transfer unit 75 
to the image data recording device 80 . 

The encryption unit 76 encrypts the image data 
processed by the image processing unit 72 in the 
predetermined processes using the common key 
transmitted from the image data recording device 80. 
The print control data generating unit 77 generates 
print control data by converting the print image data 
encrypted by the encryption unit 76 into a print 
control command. Then, the generated print control 
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data and "the print ID generated by the print ID 
generating unit 73 and stored in the print ID storage 
unit 74 are transferred by the second transfer unit 78 
to the image data recording device 80. 

The common key generating unit 82 generates a 
common key based on the print ID transferred from the 
image data processing device 70. Then, the generated 
common key and the transferred print ID are stored and 
managed in the memory of the management unit 83. 

The common key issue unit 84 transmits the common 
key generated by the common key generating unit 82 to 
the image data processing device 70. When the print ID 
and the print control data are transmitted from the 
image data processing device 70, the common key 
obtaining unit 85 obtains a common key corresponding to 
the print ID from the management unit 83. 

The analyzing unit 86 analyzes the command of the 
above mentioned print data using the common key 
obtained by the common key obtaining unit 85, and 
extracts the encrypted print image data. The 
decryption unit 87 decrypts the print image data 
extracted by the analyzing unit 86 using the common key 
obtained by the common key obtaining unit 85. Then, 
the decrypted print image data is stored in a storage 
medium (not shown in the attached drawings) by the 
print unit 88. 



(Other Embodiments according to the Present Invention) 

The present invention can be applied to either a 
system comprising a plurality of appliances ( for 
example, a host computer, an interface appliance, a 
leader, a printer, etc. ) or a device comprising one 
appliance . 

In addition, the present invention further 
includes an embodiment in which a program code of 
software for realizing the functions of the above 
mentioned embodiments are provided for the computer in 
the device or the system connected to each of the above 
mentioned devices so that various devices can be 
operated to realize the functions of the above 
mentioned embodiments, and the above mentioned devices 
are operated according to the program stored in the 
computer (CPU or MPU) of the system or the device. 

In this case, the program code of the software 
realizes the functions of the above mentioned 
embodiment, and the program code itself and the unit 
for providing the program code for the computer, for 
example, a storage medium storing the program code 
constitute the present invention- The storage medium 
storing the program code can be, for example, a floppy 
disk, a hard disk, an optical disk, a magneto-optical 
disk, CD-ROM, a magnetic tape, a non-volatile memory 
card, ROM, etc. 

In addition, it is needless to say that the 
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program code is included in the embodiment: of the 
present invention not only in the case where the 
function described in the above description of the 
embodiment is realized by a computer executing the 
program code provided thereto, but also in the case the 
function is realized by the program code cooperating 
with the OS (operating system) or other application 
software operating in the computer. 

Furthermore, after the provided program code is 
stored in the memory in a function extension board of a 
computer or a function extension unit connected to the 
computer, the CPU, etc. provided in the function 
extension board or the function extension unit can 
perform all or part of an actual process at an 
instruction of the program code to realize the function 
of the above mentioned embodiment in the process. The 
present invention can also include the above mentioned 
case. 

As described above, the print control data is 
encrypted using a common key issued by an image data 
recording device. Therefore, when the image data 
processing device generates a recording image by 
controlling the image data recording device, the image 
data recording device which has issued the common key 
is required, thereby effectively preventing a number of 
unspecified image data recording devices from printing 
image data, and ensuring that the forgery preventing 
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process is performed by the image data processi 
device. Thus, the forgery of bills, valuable 
securities, etc. can be prevented without fail. 



